From 6d559ff5cfd6ee8c9bde27cc21883e2bb33ba92d Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Tue, 14 Jun 2016 09:18:33 +0200 Subject: [PATCH] [stable9] Add strict config check to config.js --- core/js/config.php | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/core/js/config.php b/core/js/config.php index 7f2d051746..921f35b59d 100644 --- a/core/js/config.php +++ b/core/js/config.php @@ -32,6 +32,10 @@ * */ +if(!\OC::$server->getRequest()->passesStrictCookieCheck()) { + die(); +} + // Set the content type to Javascript header("Content-type: text/javascript");